CVE-2012-3988

CWE-416 — Use After Free7 documents6 sources
Severity
9.3CRITICAL
EPSS
4.0%
top 11.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
12
Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird+9 more
Timeline
PublishedOct 10
Latest updateMay 13

Description

Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages10 packages

▶NVDmozilla/firefox< 10.0.8+1
▶NVDmozilla/seamonkey< 2.13

Also affects: Enterprise Linux 6.3, Ubuntu Linux 10.04, 11.04, 11.10, 12.04

🔴Vulnerability Details

2
GHSA
GHSA-wc4c-2hhq-9f86: Use-after-free vulnerability in Mozilla Firefox before 16↗2022-05-13
▶
CVEList
CVE-2012-3988: Use-after-free vulnerability in Mozilla Firefox before 16↗2012-10-10
▶

📋Vendor Advisories

3
Ubuntu
Thunderbird vulnerabilities↗2012-10-12
▶
Red Hat
Mozilla: DOS and crash with full screen and history navigation (MFSA 2012-79)↗2012-10-09
▶
Ubuntu
Firefox vulnerabilities↗2012-10-09
▶

💬Community

1
Bugzilla
CVE-2012-3988 Mozilla: DOS and crash with full screen and history navigation (MFSA 2012-79)↗2012-10-06
▶
CVE-2012-3988 (CRITICAL CVSS 9.3) | Use-after-free vulnerability in Moz | cvebase.io